error #0: x509: certificate is valid for 127.0.0.1

vural5518

The problem

ec2-user# ./kk create cluster -f config-sample.yaml

etcd health check failed: Failed to exec command: sudo -E /bin/bash -c “export ETCDCTL_API=2;export ETCDCTL_CERT_FILE=‘/etc/ssl/etcd/ssl/admin-master.pem’;export ETCDCTL_KEY_FILE=‘/etc/ssl/etcd/ssl/admin-master-key.pem’;export ETCDCTL_CA_FILE=‘/etc/ssl/etcd/ssl/ca.pem’;/usr/local/bin/etcdctl –endpoints=https://172.31.0.129:2379 cluster-health | grep -q ‘cluster is healthy’”

Error: client: etcd cluster is unavailable or misconfigured; error #0: x509: certificate is valid for 127.0.0.1, ::1, 185.32.15.139, 185.32.14.86, 185.32.15.176, 185.32.14.83, 185.32.15.145, not 172.31.0.129

error #0: x509: certificate is valid for 127.0.0.1, ::1, 185.32.15.139, 185.32.14.86, 185.32.15.176, 185.32.14.83, 185.32.15.145, not 172.31.0.129: Process exited with status 1

My config-sample.yaml

apiVersion: kubekey.kubesphere.io/v1alpha2

kind: Cluster

metadata:

name: sample

spec:

hosts:

{name: master, address: 185.32.15.139, internalAddress: 172.31.0.129, user: ec2-user, privateKeyPath: “/home/ec2-user/ssh1.pem”}
{name: worker1, address: 185.32.14.86, internalAddress: 172.31.0.133, user: ec2-user, privateKeyPath: “/home/ec2-user/ssh1.pem”}
{name: worker2, address: 185.32.15.176, internalAddress: 172.31.0.130, user: ec2-user, privateKeyPath: “/home/ec2-user/ssh1.pem”}
{name: worker3, address: 185.32.14.83, internalAddress: 172.31.0.131, user: ec2-user, privateKeyPath: “/home/ec2-user/ssh1.pem”}
{name: worker4, address: 185.32.15.145, internalAddress: 172.31.0.132, user: ec2-user, privateKeyPath: “/home/ec2-user/ssh1.pem”}

roleGroups:

etcd:
- master
  
  control-plane:
- master
  
  worker:
- worker1
- worker2
- worker3
- worker4
controlPlaneEndpoint:

internalLoadbalancer: haproxy

domain: lb.kubesphere.local

address: ""

port: 6443

kubernetes:

version: 1.23.10

clusterName: cluster.local

autoRenewCerts: true

containerManager: docker

etcd:

type: kubekey

network:

plugin: calico

kubePodsCIDR: 10.233.64.0/18

kubeServiceCIDR: 10.233.0.0/18

multus support. https://github.com/k8snetworkplumbingwg/multus-cni

multusCNI:

enabled: false

registry:

privateRegistry: ""

namespaceOverride: ""

registryMirrors: []

insecureRegistries: []

addons: []

---

apiVersion: installer.kubesphere.io/v1alpha1

kind: ClusterConfiguration

metadata:

name: ks-installer

namespace: kubesphere-system

labels:

version: v3.3.2

spec:

persistence:

storageClass: ""

authentication:

jwtSecret: ""

zone: ""

local_registry: ""

namespace_override: ""

dev_tag: ""

etcd:

monitoring: false

endpointIps: localhost

port: 2379

tlsEnable: true

common:

core:

  console:

    enableMultiLogin: true

    port: 30880

    type: NodePort

# apiserver:

#  resources: {}

# controllerManager:

#  resources: {}

redis:

  enabled: false

  volumeSize: 2Gi

openldap:

  enabled: false

  volumeSize: 2Gi

minio:

  volumeSize: 20Gi

monitoring:

  # type: external

  endpoint: http://prometheus-operated.kubesphere-monitoring-system.svc:9090

  GPUMonitoring:

    enabled: false

gpu:

  kinds:

  - resourceName: "nvidia.com/gpu"

    resourceType: "GPU"

    default: true

es:

  # master:

  #   volumeSize: 4Gi

  #   replicas: 1

  #   resources: {}

  # data:

  #   volumeSize: 20Gi

  #   replicas: 1

  #   resources: {}

  logMaxAge: 7

  elkPrefix: logstash

  basicAuth:

    enabled: false

    username: ""

    password: ""

  externalElasticsearchHost: ""

  externalElasticsearchPort: ""

alerting:

enabled: false

# thanosruler:

#   replicas: 1

#   resources: {}

auditing:

enabled: false

# operator:

#   resources: {}

# webhook:

#   resources: {}

devops:

enabled: false

# resources: {}

jenkinsMemoryLim: 8Gi

jenkinsMemoryReq: 4Gi

jenkinsVolumeSize: 8Gi

events:

enabled: false

# operator:

#   resources: {}

# exporter:

#   resources: {}

# ruler:

#   enabled: true

#   replicas: 2

#   resources: {}

logging:

enabled: false

logsidecar:

  enabled: true

  replicas: 2

  # resources: {}

metrics_server:

enabled: false

monitoring:

storageClass: ""

node_exporter:

  port: 9100

  # resources: {}

# kube_rbac_proxy:

#   resources: {}

# kube_state_metrics:

#   resources: {}

# prometheus:

#   replicas: 1

#   volumeSize: 20Gi

#   resources: {}

#   operator:

#     resources: {}

# alertmanager:

#   replicas: 1

#   resources: {}

# notification_manager:

#   resources: {}

#   operator:

#     resources: {}

#   proxy:

#     resources: {}

gpu:

  nvidia_dcgm_exporter:

    enabled: false

    # resources: {}

multicluster:

clusterRole: none

network:

networkpolicy:

  enabled: false

ippool:

  type: none

topology:

  type: none

openpitrix:

store:

  enabled: false

servicemesh:

enabled: false

istio:

  components:

    ingressGateways:

    - name: istio-ingressgateway

      enabled: false

    cni:

      enabled: false

edgeruntime:

enabled: false

kubeedge:

  enabled: false

  cloudCore:

    cloudHub:

      advertiseAddress:

        - ""

    service:

      cloudhubNodePort: "30000"

      cloudhubQuicNodePort: "30001"

      cloudhubHttpsNodePort: "30002"

      cloudstreamNodePort: "30003"

      tunnelNodePort: "30004"

    # resources: {}

    # hostNetWork: false

  iptables-manager:

    enabled: true

    mode: "external"

    # resources: {}

  # edgeService:

  #   resources: {}

terminal:

timeout: 600